aboutsummaryrefslogtreecommitdiff
path: root/README.md
diff options
context:
space:
mode:
authorAda Isopods <me@bathynomus.xyz>2025-05-21 23:19:25 -0600
committerAda Isopods <me@bathynomus.xyz>2026-10-21 23:04:34 -0600
commitd71a4a6b8bb7773cef59e4dd7cb7327c68c68f2f (patch)
treea94a6b7c6da082896e16a36ddbe90a4bc039edc2 /README.md
parent31b347c340200bf7766486eaf7b7b1edd9bd8498 (diff)
filter by sensor
Diffstat (limited to 'README.md')
-rw-r--r--README.md6
1 files changed, 6 insertions, 0 deletions
diff --git a/README.md b/README.md
index 7ed118b..f18bf9f 100644
--- a/README.md
+++ b/README.md
@@ -24,6 +24,12 @@ Options:
-r, --redact-ip Redact IP addresses by converting them to 16-character hashes
-i, --filter-ip FILTER_IP
Filter data to a specific IP, censored hash thereof, or netmask (127.0.0.1 / 0b39f7265d91e7c3 / 127.0.0.0/16)
+-u, --filter-username FILTER_USERNAME
+ Filter data to uses of a specific username
+-p, --filter-password FILTER_PASSWORD
+ Filter data to uses of a specific password. Pass "[SSH_PUBKEY_ATTEMPT]" to filter for attempts to log in using an SSH public key instead of a password, which does happen
+-z, --filter-sensor FILTER_SENSOR
+ Filter data to a certain "sensor". Useful if Cowrie is running in proxy mode to multiple endpoints
-c, --no-color Don't color-code terminal output
-s, --stats Print aggregated statistics
-S, --only-stats Print only aggregated statistics